Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
File: VZnll39h5z8wSC2usaXy33LV7UY.mft (raw, json)
Hash identifier: SwlpDXBu3F6DAaBZ/jPBzjiTkHdrapTCHQKnrP8zklg=
Subject key identifier: BE:62:21:B4:DA:9A:69:03:87:FB:47:64:6A:26:DC:CA:0A:D8:36:A9
Authority key identifier: 55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46
Certificate issuer: /CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
Certificate serial: 0194BC72A7EF4DF680D4823616DCC056FACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
Manifest number: 12A9
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: VZnll39h5z8wSC2usaXy33LV7UY.crl (hash: mPEe6aKRvQk9mFuhi3GDc9ReqX8avT2msc7mi5+gnPQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a7:ef:4d:f6:80:d4:82:36:16:dc:c0:56:fa:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5599e5977f61e73f30482daeb1a5f2df72d5ed46
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=be6221b4da9a690387fb47646a26dcca0ad836a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:9f:4b:e2:73:d7:55:ff:2a:9f:19:63:3e:
5b:68:3f:70:6e:03:29:1d:d4:3c:ac:83:73:99:b0:
f4:a4:19:45:fa:7e:72:c4:75:0d:dc:01:b9:92:7b:
48:32:60:a2:ad:90:bd:84:93:6d:dd:ad:a5:a1:e3:
c3:ed:cf:9b:36:1c:20:4b:34:a3:c5:8a:2f:80:94:
57:e4:fc:3b:e7:06:ac:d7:0f:41:1d:84:49:22:cd:
60:3f:e4:3c:8c:ea:a5:59:d2:e2:59:e9:ec:7a:da:
d0:21:5b:8d:1d:87:47:f0:4e:88:8b:86:a3:78:97:
0d:eb:79:a8:0c:a0:3f:6f:d0:b3:2f:ca:43:03:b3:
2c:d8:e5:ac:3a:5b:6a:3d:e4:68:8b:b3:b9:d1:5c:
12:53:9f:17:75:2c:32:6f:53:1b:9e:de:3c:b1:c0:
92:20:ed:0c:e5:44:d7:fa:28:ef:e5:84:32:98:b1:
8d:cf:17:ee:f7:65:ef:35:e7:49:3e:16:d5:2c:ba:
bf:33:f0:78:f1:fe:73:73:89:11:95:36:3e:d4:cd:
b8:8e:1c:34:4f:f1:1d:78:80:71:9d:41:2d:ca:df:
46:a1:74:64:8d:2f:03:22:30:ae:3e:7b:bb:9b:5c:
a2:26:4f:3c:bf:9d:b5:2e:c1:17:35:1f:3a:66:3a:
3e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:62:21:B4:DA:9A:69:03:87:FB:47:64:6A:26:DC:CA:0A:D8:36:A9
X509v3 Authority Key Identifier:
keyid:55:99:E5:97:7F:61:E7:3F:30:48:2D:AE:B1:A5:F2:DF:72:D5:ED:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZnll39h5z8wSC2usaXy33LV7UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7ac79b-a844-4a65-a976-9185a5db4ec5/1/VZnll39h5z8wSC2usaXy33LV7UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:cc:b1:68:a7:40:d3:39:da:2d:84:02:51:d9:c6:e0:44:7c:
3c:1b:85:cd:c1:7f:31:ae:6b:96:f5:df:d6:35:df:9b:30:1f:
64:d7:56:05:d9:55:f3:c6:8a:9d:9d:4c:81:34:44:cc:cb:73:
89:98:2b:54:fc:39:33:5c:06:b6:03:94:ba:39:9c:2f:93:4f:
10:a5:c6:06:56:a5:11:dc:69:d9:46:92:07:92:37:a9:10:f1:
3d:37:96:b0:8d:da:eb:9b:8a:1d:be:eb:1c:fe:48:91:22:99:
b7:ea:5c:63:54:f0:41:f3:62:96:ba:68:a8:b0:fa:71:52:eb:
c1:9c:a4:71:35:5c:ed:bc:4e:26:29:1c:5c:51:b3:48:fc:10:
73:08:0b:e2:e0:0b:79:34:e9:e3:61:c4:2f:d4:ba:76:b1:af:
e4:27:0e:b7:dc:4d:c7:06:b2:a5:3c:7a:35:2c:6d:23:0d:f3:
04:1f:9a:bc:91:90:ab:45:2b:7a:fa:af:53:34:54:c9:bf:56:
13:dd:19:0e:a2:b0:cb:61:68:bc:0b:eb:c7:3f:04:19:54:3e:
eb:7e:da:c1:75:44:3a:ad:cd:02:de:06:3e:d6:f4:b9:f8:db:
dd:9a:44:20:69:6e:11:80:cb:64:65:44:b4:cb:95:d8:35:65:
23:4d:24:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqfvTfaA1II2FtzAVvrLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OTllNTk3N2Y2MWU3M2YzMDQ4MmRhZWIxYTVmMmRmNzJk
NWVkNDYwHhcNMjUwMTMxMTMwMDE4WhcNMjUwMjAxMTMwMDE4WjAzMTEwLwYDVQQD
EyhiZTYyMjFiNGRhOWE2OTAzODdmYjQ3NjQ2YTI2ZGNjYTBhZDgzNmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtefS+Jz11X/Kp8ZYz5baD9wbgMp
HdQ8rINzmbD0pBlF+n5yxHUN3AG5kntIMmCirZC9hJNt3a2loePD7c+bNhwgSzSj
xYovgJRX5Pw75was1w9BHYRJIs1gP+Q8jOqlWdLiWensetrQIVuNHYdH8E6Ii4aj
eJcN63moDKA/b9CzL8pDA7Ms2OWsOltqPeRoi7O50VwSU58XdSwyb1Mbnt48scCS
IO0M5UTX+ijv5YQymLGNzxfu92XvNedJPhbVLLq/M/B48f5zc4kRlTY+1M24jhw0
T/EdeIBxnUEtyt9GoXRkjS8DIjCuPnu7m1yiJk88v521LsEXNR86Zjo+nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5iIbTammkDh/tHZGom3MoK2DapMB8GA1UdIwQY
MBaAFFWZ5Zd/Yec/MEgtrrGl8t9y1e1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlpubGwzOWg1ejh3U0MydXNhWHkzM0xWN1VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83YWM3OWItYTg0NC00YTY1LWE5NzYt
OTE4NWE1ZGI0ZWM1LzEvVlpubGwzOWg1ejh3U0MydXNhWHkzM0xWN1VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi83YWM3OWItYTg0NC00YTY1LWE5NzYtOTE4NWE1ZGI0ZWM1
LzEvVlpubGwzOWg1ejh3U0MydXNhWHkzM0xWN1VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsyxaKdA
0znaLYQCUdnG4ER8PBuFzcF/Ma5rlvXf1jXfmzAfZNdWBdlV88aKnZ1MgTREzMtz
iZgrVPw5M1wGtgOUujmcL5NPEKXGBlalEdxp2UaSB5I3qRDxPTeWsI3a65uKHb7r
HP5IkSKZt+pcY1TwQfNilrpoqLD6cVLrwZykcTVc7bxOJikcXFGzSPwQcwgL4uAL
eTTp42HEL9S6drGv5CcOt9xNxwaypTx6NSxtIw3zBB+avJGQq0UrevqvUzRUyb9W
E90ZDqKwy2FovAvrxz8EGVQ+637awXVEOq3NAt4GPtb0ufjb3ZpEIGluEYDLZGVE
tMuV2DVlI00kqQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:33:45 2025 by rpki-client